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BACKGROUND 

Field of the Invention 

[0001] The present invention relates to a computing platform. More 
specifically, the present invention relates to a method and an apparatus to facilitate 
establishing a distributed Internet application platform. 

Related Art 

[0002] Computer system administrators and users wanting to share 
resources commonly use client computing systems to access a server for the 
shared data and programs. In many cases, the server may be one virtual server out 
of many virtual servers hosted on a server computing device. 
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[0003] Typically, accessing a virtual server involves using application 
service provider (ASP) based web applications to interact with the server. These 
ASP-based web applications have several drawbacks, which present problems for 
administrators, users, and support personnel. For example, many ASP-based web 
5 applications have inadequate security — ^potentially allowing access from other 
virtual servers on the same server computing device, allowing access to other 
virtual servers on the same server computing device, and allowing unauthorized 
access to the virtual server from outside the virtual server. 

[0004] These same ASP-based web applications can present varied and 
10 confusing interfaces to users, with each one requiring users to learn different 
procedures. This confusion often leads users to contact technical support 
personnel in order to resolve misunderstandings of how the interfaces operate. 

[0005] ASP-based web applications can lack flexibility; overwhelming an 
entry-level user, and, at the same time, inadequately supporting system 
15 administrators and technical support personnel. 

[0006] Additionally, ASP-based web applications typically support a 
single platform for accessing the virtual server. Porting these ASP-based web 
applications to a different platform can require extensive resources and can result 
in differing interfaces for common functionality. 
20 [0007] What is needed is a method and an apparatus that facilitates 

establishing a distributed internet application platform, while eliminating the 
problems cited above. 

SUMMARY 

25 [0008] One embodiment of the present invention provides a system to 

facilitate remote access by a user to a virtual desktop on a server through a web 
browser. The system operates by downloading a terminal services control to the 
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web browser. Next, the user receives a logon window from the server. After 
logging on to the server through the logon window, the user accesses the virtual 
desktop on the server through the web browser. 

[0009] In one embodiment of the present invention^ the user selects the 
5 server using the terminal services control. 

[0010] In one embodiment of the present invention, the server is a virtual 
server that is one of a plurality of virtual servers hosted on a common server 
platform. 

[0011] In one embodiment of the present invention, the system provides 
1 0 security for the virtual server from unauthorized access by a second virtual server. 

[0012] In one embodiment of the present invention, the system chooses a 
snap-in to provide a capability to the user from the virtual desktop. The snap-in 
controls the capability of the user. 

[0013] In one embodiment of the present invention, the capability 
1 5 includes, but is not limited to, file management, folder management, database 
access using structured query language, electronic mail, and an Internet 
information server based system-level manipulation utility. 

[0014] In one embodiment of the present invention, the capability includes 
technical support and system administration available to a provider of the server. 
20 [0015] In one embodiment of the present invention, the system uses a 

wireless application protocol device to access the virtual desktop. 



BRIEF DESCRIPTION OF THE FIGURES 
[0016] FIG. 1 illustrates computing devices coupled together in 
25 accordance with an embodiment of the present invention. 

[0017] FIG. 2 illustrates access to snap-ins using web browser 202 in 
accordance with an embodiment of the present invention. 
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[0018] FIG. 3 is a flowchart illustrating the process of accessing 
functionality using web browser 202 in accordance with an embodiment of the 
present invention. 

DETAILED DESCRIPTION 
[0019] The following description is presented to enable any person skilled 
in the art to make and use the invention, and is provided in the context of a parti- 
cular application and its requirements. Various modifications to the disclosed 
embodiments will be readily apparent to those skilled in the art, and the general 
principles defined herein may be applied to other embodiments and apphcations 
without departing from the spirit and scope of the present invention. Thus, the 
.present invention is not intended to be limited to the embodiments shown, but is 
to be accorded the widest scope consistent with the principles and features 
disclosed herein. 

[0020] The data structures and code described in this detailed description 
are typically stored on a computer readable storage medium, which may be any 
device or medium that can store code and/or data for use by a computer system. 
This includes, but is not limited to, magnetic and optical storage devices such as 
disk drives, magnetic tape, CDs (compact discs) and DVDs (digital versatile discs 
or digital video discs), and computer instruction signals embodied in a 
transmission medium (with or without a carrier wave upon which the signals are 
modulated). For example, the transmission medium may include a 
communications network, such as the Internet. 

Computing Devices 

[0021] FIG. 1 illustrates computing devices coupled together in 
accordance with an embodiment of the present invention. The system includes 
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user computing device 104, support computing device 118, server computing 
device 108, network 106, user 102, and support personnel 1 16, 

[0022] These computing devices can generally include any type of 
computer system, including, but not limited to, a computer system based on a 
5 microprocessor, a mainframe computer, a digital signal processor, a portable 
computing device, a personal organizer, a device controller, and a computational 
engine within an appliance. 

[0023] Network 106 can generally include any type of wire or wireless 
commmication channel capable of coupling together computing nodes. This 
10 includes, but is not limited to, a local area network, a wide area network, or a 
combination of networks. In one embodiment of the present invention, network 
106 includes the Internet. 

[0024] Server computing device 108 includes virtual servers 1 10, 1 12, and 
1 14. Virtual servers 1 10, 1 12, and 1 14 supply computer operating system services 
15 to a user so that the user has the equivalent support of a stand-alone computing 
device. Note that server computing device can host more or less than the number 
of virtual servers shown in FIG. 1. 

[0025] User 102 interacts with a virtual server, say virtual server 1 12, 
within server computing device 108 through user computing device 104. User 
20 102 can include an administrator who supplies snap-ins as described in 

conjunction with FIG. 3 and, in general, specifies user privileges for virtual server 
112. 

[0026] Support personnel 116 provide support services for server 
computing device 108 using support computing device 118. These services 
25 include establishing virtual servers, creating accounts for users, maintaining the 
virtual servers, and assisting users in solving problems. 
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System Functionality 

[0027] FIG. 2 illustrates the process of accessing snap-ins using web 
browser 202 in accordance with an embodiment of the present invention. User 
102 accesses server computing device 108 across network 106 using web browser 
5 202. Web browser 202 presents virtual server selection screen 203 to user 102. 
Microsoft Windows 2000 Terminal Services Web Connection can provide virtual 
server selection screen 203. 

[0028] Microsoft, Windows 2000, Microsoft Exchange, and Microsoft 
Management Console are trademarks or registered trademarks of Microsoft 

10 Corporation, Redmond, Washington, in the United States and in other countries. 

[0029] User 102 uses virtual server selection screen 203 to select a virtual 
server, say virtual server 112. Next, web browser 202 presents login screen 204 to 
user 102 so that user 102 can log in to virtual server 112. After successfiilly 
logging in to virtual server 1 12, web browser 202 displays virtual desktop 206 

1 5 using virtual desktop screen 205. 

[0030] Virtual desktop 206 provides user 102 with a familiar Windows 
screen including shortcuts for the programs and operations available to user 102. 
Virtual desktop 206 can include advertising icons, which can be a revenue source 
for the provider of server computing device 108. 

20 [0031] Virtual desktop 206 uses the Microsoft Management Console 

(MMC) to control the extent of capabilities extended to user 102. The MMC 
provides a framework for various snap-ins, which allow user 102 to access file 
manager 208, folder manager 210, structured query language (SQL) manager 212, 
e-mail manager 214, and Internet information server (IIS) 216. Note that the 

25 snap-ins are not limited to the ones listed* A practitioner with ordinary skill in the 
art will be able to add a snap-in to control any desired fimctionality. 
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[0032] File manager 208 allows user 102 to access files stored on virtual 
server 112. File manager 208 includes functionality to create, copy, delete, and 
move files. 

[0033] Folder manager 210 allows user 102 to arrange files stored on 
virtual server 1 12. Folder manager includes fimctionality to create, copy, delete, 
and move folders. 

[0034] SQL manager 212 allows user 102 to access database files. SQL 
manager 212 includes functionality to view the contents of a database file 
according to an entered search criteria. 

[0035] E-mail manager 214 allows user 102 to process electronic mail 
messages. E-mail manager 214 includes functionality to create, send, receive, 
sort, delete, and forward electronic mail messages. 

[0036] IIS manager 216 allows user 102 in the role of an administrator 
access to administration functions on virtual server 112. IIS manager 216 
includes fimctionality for remote administration of Microsoft Exchange, IIS and 
active directory management within a controlled and secure environment. 

Accessing Fuactionalitv 

[0037] FIG. 3 is a flowchart illustrating the process of accessing 
functionality using web browser 202 in accordance with an embodiment of the 
present invention. The system starts when user 102 opens web browser 202 on 
user computing device 104 (step 302). Next, user 102 receives a terminal services 
web connection from server computing device 108 (step 304). The terminal 
services web connection includes virtual server selection screen 203. User 102 
then selects the desired virtual server, say virtual server 112 (step 306). 
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[0038] After selecting the virtual server, user 102 receives login screen 
204 from virtual server 1 12 (step 308). Next, user 102 uses login screen 204 to 
log in to virtual server 112 (step 310). 

[0039] User 102 then receives virtual desktop 206 (step 312). Virtual 
5 desktop 206 uses Microsoft Management Console (MMC) to allow control of 
fimctionality. The MMC loads snap-ins to control fimctionality for user 102 (step 
314). Note that support personnel 1 1 6 use support computing device 1 1 8 to 
access ftmctionality in the same manner that user 102 uses user computing device 
104. Support personnel 1 1 6 have less restrictions than user 102, and can access 
10 control mechanism of server computing device 108 as v^ell as the control 
mechanisms for the individual virtual servers. 

[0040] The foregoing descriptions of embodiments of the present 
invention have been presented for purposes of illustration and description only. 
They are not intended to be exhaustive or to limit the present invention to the 
15 forms disclosed. Accordingly, many modifications and variations will be apparent 
to practitioners skilled in the art. Additionally, the above disclosure is not 
intended to limit the present invention. The scope of the present invention is 
defined by the appended claims. 
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